Major Incidents or Breaches

  • ConnectWise suspended its Cloud Backup service after unknown threat actors compromised Microsoft 365 tenants through a supply-chain attack. The attackers gained unauthorized access to ConnectWise application identities, prompting the company to disable seven application identities and shut down customer access to the affected service while the investigation continues [2][3].

Newly Discovered Vulnerabilities

  • Drupal released patches for two critical remote code execution vulnerabilities affecting all supported versions of its content management system. The project warned that exploits for these flaws may emerge soon [4].

Notable Threat Actor Activity

  • Threat actors have evolved phishing tactics beyond traditional email-based attacks, now operating phishing as a criminal impersonation industry, leveraging a variety of channels and sophisticated impersonation techniques [1].

Trends, Tools, or Tactics of Interest

  • There is a significant shift in the cybersecurity job market in the US, with overall postings declining by 26 percent while demand for AI security engineers is rapidly increasing [5].

Sources#

  1. ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants - thehackernews.com
  2. Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack - bleepingcomputer.com
  3. Drupal patches critical RCE flaws, warns exploits may emerge soon - bleepingcomputer.com
  4. Phishing Is Now A Criminal Impersonation Industry. Here Is How To Fight Back - blog.knowbe4.com
  5. US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars - securityweek.com